{ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2013-4308", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "n/a", "version" : { "version_data" : [ { "version_value" : "n/a" } ] } } ] }, "vendor_name" : "n/a" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "Cross-site scripting (XSS) vulnerability in pages/TalkpageHistoryView.php in the LiquidThreads (LQT) extension 2.x and possibly 3.x for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to inject arbitrary web script or HTML via a thread subject." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "n/a" } ] } ] }, "references" : { "reference_data" : [ { "name" : "[MediaWiki-announce] 20130903 MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8", "refsource" : "MLIST", "url" : "http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html" }, { "name" : "[oss-security] 20130904 Re: CVE request: MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8", "refsource" : "MLIST", "url" : "http://seclists.org/oss-sec/2013/q3/553" }, { "name" : "https://bugzilla.wikimedia.org/show_bug.cgi?id=53320", "refsource" : "CONFIRM", "url" : "https://bugzilla.wikimedia.org/show_bug.cgi?id=53320" }, { "name" : "62218", "refsource" : "BID", "url" : "http://www.securityfocus.com/bid/62218" }, { "name" : "96906", "refsource" : "OSVDB", "url" : "http://osvdb.org/96906" }, { "name" : "mediawiki-cve20134308-xss(86891)", "refsource" : "XF", "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/86891" } ] } }